HG10
- Software type
- Operating system
- Total vulnerabilities (90 days)
- 7
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/07/2026, HG10 recorded 7 security vulnerabilities in the last 90 days, of which 7 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of HG10 and determine which vulnerabilities affect that version.
CVE-2026-104610Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflowCVE-2026-86167Tenda HG10 Boa formgponConf os command injectionCVE-2026-86166Tenda HG10 Boa Web Server formWanRedirect buffer overflowCVE-2026-86165Tenda HG10 formURL buffer overflowCVE-2026-85110Tenda HG10 Boa Web Server formWlanSetup buffer overflow| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-104610Tenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow | Exploitation statusActively exploited | FixNo | Published10/02/2026 | SeverityCritical |
CVE-2026-86167Tenda HG10 Boa formgponConf os command injection | Exploitation statusActively exploited | FixNo | Published09/06/2026 | SeverityCritical |
CVE-2026-86166Tenda HG10 Boa Web Server formWanRedirect buffer overflow | Exploitation statusActively exploited | FixNo | Published09/06/2026 | SeverityHigh |
CVE-2026-86165Tenda HG10 formURL buffer overflow | Exploitation statusActively exploited | FixNo | Published09/06/2026 | SeverityCritical |
CVE-2026-85110Tenda HG10 Boa Web Server formWlanSetup buffer overflow | Exploitation statusActively exploited | FixNo | Published09/03/2026 | SeverityHigh |
CVE-2026-85109Tenda HG10 Boa Web Server formLogin buffer overflow | Exploitation statusActively exploited | FixNo | Published09/03/2026 | SeverityCritical |
CVE-2026-82542Tenda HG10 Boa Web Server formIPv6Routing buffer overflow | Exploitation statusActively exploited | FixNo | Published08/30/2026 | SeverityCritical |
CVE-2026-11553Tenda HG7/HG9/HG10 formPPPEdit stack-based overflow | Exploitation statusActively exploited | FixNo | Published06/08/2026 | SeverityHigh |
CVE-2026-11499Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow | Exploitation statusNot exploited | FixNo | Published06/08/2026 | SeverityCritical |
CVE-2026-11498Tenda HG7/HG9/HG10 Web Management voip_other_set asp_voip_OtherSet stack-based overflow | Exploitation statusNot exploited | FixNo | Published06/08/2026 | SeverityHigh |
CVE-2026-6988Tenda HG10 Boa Service formRouting formRoute buffer overflow | Exploitation statusActively exploited | FixNo | Published04/25/2026 | SeverityHigh |
CVE-2026-1690Tenda HG10 formSysCmd system command injection | Exploitation statusActively exploited | FixNo | Published01/30/2026 | SeverityMedium |
CVE-2026-1689Tenda HG10 Login formLogin checkUserFromLanOrWan command injection | Exploitation statusActively exploited | FixNo | Published01/30/2026 | SeverityMedium |
CVE-2026-1687Tenda HG10 Boa Webserver formSamba command injection | Exploitation statusActively exploited | FixNo | Published01/30/2026 | SeverityMedium |
14 Results | Page 1 of 1